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Amendments to the Claims: 

This listing of Claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for control of usage of content, wherein 
protected content exists being usage restricted by one or more first usage rights 
specifying one or more usage restrictions and/or one or more usage permissions of the 
protected content at a user device, the method comprising the steps of; 

- obtaining at the user device a first content encryption key, 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the protected content 
by [[a]] the first content encryption key in a first secure environment of the user device 
and by accessing the decrypted content in the first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more usage 
permissions of the content at a recipient device and the at least one defined usage right 
comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or more 
first usage rights, 

- generating at the user device integrity protection information for the at least one 
defined usage right, 

- encrypting the content with a content encryption key, 

- obtaining at the user device a key encryption key associated with the recipient 
device and/or an operator of the recipient device, 

- encrypting the content encryption key with [[a]] the key encryption key 
as s oc i at e d w i th th e r e c i pi e nt d e v i c e and/or an oper a tor of th e r e cip ie nt d e vic e, 

- communicating the encrypted content, the at least one defined usage right, the 
encrypted content encryption key, and the integrity protection information to the 
recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the recipient device, 



Page 2 of 16 



Attorney Docket No. P18484-US1 
11-5068 

- verifying at the recipient device the integrity of the at least one defined usage 
right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with a 
decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 

- using the content at the recipient device according to the applied at least one 
usage right, 

restricting or b l ocking or dolot i ng tho at l oast ono dofinod ucago right at tho 
roc i p i ont dov i co boforo tho oxpiry of tho tomporal rootr i ction, 

- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction. 

. - communicating an indication of the restricting or blocking or deleting from the 
recipient device to the user device, the indication comprising the at least one received 
usage right, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the temporal 
restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , whoroin tho restricting or blocking or doloting stop, tho 
s e cond gonorating stop, tho socond commun i cating stop, tho socond applying stop, and 
th e abo li shing s t e p ar e e x e cut e d in se qu e nc e on e aft e r anoth e r . 

(Canceled) 

5. (Previously Presented) The method according to claim 1, further 
comprising the steps of 
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- recognizing by the user device that the at least one received usage right 
relates to the at least one defined usage right and 

- using the content at the user device according to the at least one first usage 
right even within the time upon the expiration of the temporal restriction. 

6. (Previously Presented) The method according to claim 1, wherein the 
step of communicating the at least one defined usage right to the recipient device is 
executed by 

- communicating the at least one defined usage right from the user device to 
a rights server, 

- associating by the rights server the at least one defined usage right with 
authorization information indicating a rights issuer authorization for the at 
least one defined usage right to the recipient device, 

- communicating the at least one defined usage right and the authorization 
information from the rights server to the recipient device, 

and the recipient device verifies the rights issuer authorization based on the 
received authorization information. 

7. (Previously Presented) The method according to claim 1 further 
comprising the step of communicating to a charging server an indication about the 
communication of the at least one defined usage right. 

8. (Previously Presented) The method according to claim 1, wherein an 
input unit of the user device receives at least one instruction from a user for defining 
the at least one usage right. 

9. (Previously Presented) The method according to claim 1 further 
comprising the step of defining at least one further usage right for at least one further 
recipient device for controlling the usage of the content at the at least one further 
device. 
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10. (Currently Amended) A user device for controlling a usage of 
content at a recipient device, the user device comprising: 

at least a transmission unit and a processing unit and further a receiving 
unit, wherein protected content exists being usage restricted by one or more first 
usage rights specifying one or more usage restrictions and/or one or more usage 
permissions of the protected content at the user device, and 

the processing unit being adapted to obtain a first content encryption key 
and obtain the content from the protected content in accordance with the one or 
more first usage rights by decrypting the protected content with a first content 
encryption key in a first secure environment of the user device and by accessing the 
decrypted content in the first secure environment, to define at least one usage right 
specifying one or more usage restrictions and/or one or more usage permissions of 
the content at the recipient device, the at least one defined usage right comprising a 
temporal restriction, to verify that the at least one defined usage right is a subset of 
the one or more first usage rights, to generate integrity protection information for the 
at least one defined usage right, to encrypt the content with a content encryption 
key, to obtain a key encryption key associated with the recipient device and/or an 
operator of the recipient device, to encrypt the content encryption key with [[a]] the 
key encryption key associated w i th the recipient device and/or an oporator of the 
r e cip i ent dovico , the transmission unit being adapted to send the encrypted content, 
the at least one defined usage right, the encrypted content encryption key, and the 
integrity protection information to the recipient device, and the processing unit being 
adapted to restrict the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the recipient 
device, the receiving unit is adapted to receive an indication of a restricting or a 
blocking or a deleting of the at least one defined usage rights from the recipient 
device before the expiry of the temporal restriction, wherein the indication comprises 
at least one received usage right that is a subset of the at least one defined usage 
right, the processing unit is adapted to apply the at least one received usage right 
after the receipt of the indication from the recipient device until the expiry of the 
temporal restriction and to abolish the restriction of the one or more first usage rights 
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the when temporal restriction expire s, whoroin th e r e c e iving unit rece i ves th e 
indication of th e r e stricting or th o block i ng or th o d o loting of th e at l e ast ono defined 
usago rights, tho procossing un i t applioc tho at loast ono rocoivod usago right until 
th e e xp i ry of th e t e mporal roctriction and abolishes tho rostrict i on of tho ono or mor e 
first usago rights when tompora l rostriction e xpir e s in se qu e nc e ono aftor another . 

11. (Previously Presented) The user device according to claim 10, the 
user device being adapted to load the protected content via a receiving unit and to 
store the protected content at a storage and/or to store pre-installed protected 
content at the storage. 

12-14. (Canceled) 

15. (Previously Presented) The user device according to claim 10, the 
user device being adapted to recognize that the at least one received usage right 
relates to the at least one defined usage right and to use the content according to 
the at least one first usage right even within the time upon the expiration of the 
temporal restriction. 

1 6. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to generate an instruction for a rights server to 
associate the at least one defined usage right with authorization information 
indicating a rights issuer authorization for the at least one defined usage right to the 
recipient device and to communicate the at least one defined usage right and the 
authorization information to the recipient device, and the transmission unit is 
adapted send the instruction and the at least one defined usage right to the rights 
server. 

17. (Previously Presented) The user device according to claim 10, wherein 
the transmission unit is adapted to send to a charging server an indication about the 
communication of the at least one defined usage right to the recipient device. 
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18. (Previously Presented) The user device according to claim 10, the 
user device further comprising an input unit which is adapted to receive at least one 
instruction from a user and the processing unit is adapted to define the at least one, 
usage right based on the at least one instruction from the user. 

19. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to define at least one further usage right for at least 
one further recipient device for controlling the usage of the content at the at least 
one further recipient device. 

20. (Currently Amended) A recipient device for a controlled usage of 
content, the recipient device comprising at least a receiving unit and processing unit 
and further a transmission unit, wherein the receiving unit is adapted to receive the 
content being encrypted by a content encryption key, at least one defined usage 
right specifying one or more usage restrictions and/or usage permissions of the 
content and the at least one defined usage right comprising a temporal restriction, a 
content encryption key being encrypted by a key encryption key associated with the 
recipient device and/or an operator of the recipient device, and integrity protection 
information for the at least one defined usage right, the processing unit is adapted to 
verify the integrity of the at least one usage right based on the integrity protection 
information, to decrypt the encrypted content encryption key with a decryption key 
corresponding to the key encryption key, to decrypt the encrypted content with the 
content encryption key in a secure environment, to apply the at least one defined 
usage right to the content in the secure environment, and to use the content 
according to the applied at least one defined usage right, to r e strict or block or d ele t e 
tho at loast ono dofinod usage right boforo tho tomporal restrict i on expir e s, to 
generate an indication of the restricting or the blocking or the deleting, to generate at 
least one received usage right that is a subset of the at least one defined usage right 
for the indication, to restrict or block or delete the at least one defined usage right 
before the temporal restriction expires, and the transmission unit is adapted to send 
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the indication comprising the at least one received usage right to the user devicer 
wh e r ei n the r e c i p ie nt d e vic e restricts or block s or de le tes th e at least on e def i n e d 
usago r i ghts, gonoratos tho indicat i on of tho restricting or tho blocking or tho 
de l ot i ng, gonorates tho at loast ono rec e ived usago right that is a subcot of the at 
l oast ono dofinod usago right for tho indicat i on, and sonds tho indicat i on comprising 
th e at l e ast on e r e c ei v e d usag e right to the user d e vic e i n s e qu e nc e on e aft e r 
anoth e r . 

21. (Previously Presented) The recipient device according to claim 20, 
wherein the processing unit is adapted to generate an alert if the integrity of the at 
least one defined usage right is violated and to initiate an indication of the alert at an 
output unit. 

22-23. (Canceled) 

24. (Previously Presented) The recipient device according to claim 20, 
wherein the receiving unit is adapted to receive the at least one defined usage right 
and associated authorization information indicating a rights issuer authorization from 
a rights server and the processing unit is adapted to verify the rights issuer 
authorization based on the received authorization information. 

25 -28 (Canceled) 



29. (Currently Amended) A method for control of usage of content, wherein 
protected content exists being usage restricted by one or more first usage rights 
specifying one or more usage restrictions and/or one or more usage permissions of the 
protected content at a user device, the method comprising the steps of: 

- obtaining at the user device a first content encryption key, 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
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environment of the user device and by accessing the decrypted content in the 
first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more 
usage permissions of the content at a recipient device and the at least one 
defined usage right comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or 
more first usage rights, 

- generating at the user device integrity protection information for the at least 
one defined usage right, 

- encrypting the content with a content encryption key, 

- obtaining at the user device a key encryption key associated with the 
recipient device and/or an operator of the recipient device, 

- encrypting the content encryption key with [[a]] the key encryption key 
accooiatod with tho rooip i ont dovico and/or an oporator of tho roc i piont 
d e v i c e, 

- communicating the encrypted content, the at least one defined usage right, 
the encrypted content encryption key, and the integrity protection information 
to the recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the 
recipient device, 

- verifying at the recipient device the integrity of the at least one defined 
usage right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with 
a decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 
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- using the content at the recipient device according to the applied at least 
one usage right, 

rostricting or blocking or do l ot i ng tho at l east on e dof i nod usago right at the 
roo i piont d e v i c e b e fore tho oxpiry of tho tomporo l restr i ct i on, 

- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction. 

- communicating an indication of the restricting or blocking or deleting from 
the recipient device to the user device, the indication comprising the at least 
one received usage right, without returning the encrypted content to the user 
device, r 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the 
temporal restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , whoroin tho rostrict i ng, blocking or do l oting st e p? 
th e s e cond g e n e rat i ng s t e p, th e se cond communicat i ng 6 t e p, th e s e cond 
app l ying st e p, and tho abolishing st e p are e x e cut e d i n soqu e nco ono aft e r 
anoth e r . 
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